> ## Documentation Index
> Fetch the complete documentation index at: https://docs.codeant.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Application Security Rules

> CodeAnt AI detects security vulnerabilities across 25+ programming languages, organized by the OWASP Top 10 2021 security standard. Each rule is mapped to specific CWE identifiers for precise vulnerability classification.

CodeAnt AI's Application Security Database covers the **OWASP Top 10 2021** vulnerability categories across **25+ programming languages and frameworks**. Every detected vulnerability is mapped to its corresponding **CWE (Common Weakness Enumeration)** identifier for precise classification and compliance reporting.

> [card] [A01:2021  - Broken Access Control](https://docs.codeant.ai/application_rules/a01-broken-access-control.md)
>
> Access control enforces policy such that users cannot act outside of their intended permissions. Failures typically lead to unauthorized information d...

> [card] [A02:2021  - Cryptographic Failures](https://docs.codeant.ai/application_rules/a02-cryptographic-failures.md)
>
> Failures related to cryptography which often lead to sensitive data exposure. This includes the use of weak or broken cryptographic algorithms, improp...

> [card] [A03:2021  - Injection](https://docs.codeant.ai/application_rules/a03-injection.md)
>
> Injection flaws occur when an application sends untrusted data to an interpreter as part of a command or query. This includes SQL injection, NoSQL inj...

> [card] [A04:2021  - Insecure Design](https://docs.codeant.ai/application_rules/a04-insecure-design.md)
>
> Insecure design refers to risks related to flaws in the design and architecture of an application, as distinguished from implementation bugs. This inc...

> [card] [A05:2021  - Security Misconfiguration](https://docs.codeant.ai/application_rules/a05-security-misconfiguration.md)
>
> Security misconfiguration is the most common issue in application security. This includes insecure default configurations, incomplete configurations, ...

> [card] [A06:2021  - Vulnerable and Outdated Components](https://docs.codeant.ai/application_rules/a06-vulnerable-outdated-components.md)
>
> Applications that use components with known vulnerabilities may undermine application defenses and enable various attacks. This includes outdated libr...

> [card] [A07:2021  - Identification and Authentication Failures](https://docs.codeant.ai/application_rules/a07-auth-failures.md)
>
> Confirmation of the user's identity, authentication, and session management is critical to protect against authentication-related attacks. This includ...

> [card] [A08:2021  - Software and Data Integrity Failures](https://docs.codeant.ai/application_rules/a08-data-integrity-failures.md)
>
> Software and data integrity failures relate to code and infrastructure that does not protect against integrity violations. This includes insecure dese...

> [card] [A09:2021  - Security Logging and Monitoring Failures](https://docs.codeant.ai/application_rules/a09-logging-monitoring-failures.md)
>
> Without logging and monitoring, breaches cannot be detected. Insufficient logging, detection, monitoring, and active response allows attackers to furt...

> [card] [A10:2021  - Server-Side Request Forgery (SSRF)](https://docs.codeant.ai/application_rules/a10-ssrf.md)
>
> SSRF flaws occur when a web application fetches a remote resource without validating the user-supplied URL. This allows attackers to force the applica...

***

## Language Coverage

CodeAnt AI detects application security vulnerabilities in the following languages and frameworks:

> [card] Python
>
> Django, Flask, FastAPI

> [card] Java
>
> Spring, Struts, Servlets

> [card] JavaScript
>
> Node.js, Express, React

> [card] TypeScript
>
> Angular, NestJS, Next.js

> [card] Go
>
> Gorilla, net/http, Gin

> [card] C#
>
> .NET, ASP.NET, Razor

> [card] Ruby
>
> Rails, Sinatra

> [card] PHP
>
> Laravel, Symfony, WordPress

> [card] Kotlin
>
> Android, Ktor, Spring

> [card] Swift
>
> iOS, macOS, Server-side

> [card] Rust
>
> Actix, Rocket, Tokio

> [card] C / C++
>
> System-level security

> [card] Scala
>
> Play, Akka, Spark

> [card] [Elixir](https://docs.codeant.ai/rules/elixir.md)
>
> Phoenix, Plug

> [card] Terraform
>
> AWS, Azure, GCP

> [card] Dockerfile
>
> Container security


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.